Metrics Docs

API Tokens

Manage the single long-lived API token used by Distlang Metrics clients and automation.

Where tokens live

Sign in at dash.distlang.com and open Auth.

That page is the source of truth for:

  • creating your API token
  • rotating it
  • revoking it
  • reviewing browser sessions

Current token model

Distlang Metrics currently exposes one active long-lived API token per account.

When you create or rotate a token:

  • the token value is shown once
  • you need to copy it immediately
  • existing clients using the old token need to be updated if you rotate

Store the token in environment configuration rather than hardcoding it into source files.

Examples:

  • local shell: DISTLANG_ACCESS_TOKEN
  • Cloudflare Workers: Wrangler secret or environment binding
  • Vercel: project environment variable

Rotation and revocation

Rotate the token when you need to replace credentials without changing the rest of your setup.

Revoke it if the token may have leaked. Any CLI jobs or services using that token will need a replacement before they can write metrics again.

Next steps